Re: How to Change Win 2000 Cached Account Password?
From: Steven Umbach (n9rou_at_comcast.com)
Date: 09/16/03
- Next message: Jack Seredyniecki: "Re: hacking from Terminal services or some other means"
- Previous message: kurtschelling: "login error"
- In reply to:(deleted message) Some One: "How to Change Win 2000 Cached Account Password?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 16 Sep 2003 00:25:21 GMT
I have never read or figured a way to change cached credentials without
connecting to the domain. You may want to create two separate accounts - one for
domain, and one for vpn. You could configure vpn account password to not expire.
You could also use security policy user right assignment for allow/deny network
access to control which computers the vpn users can access if you want to beef
up security for vpn access. Posting in the ras_routing newsgroup may bring some
helpful feedback. --- Steve
"Some One" <garg444NOSPAM@yahoo.com> wrote in message
news:7yc9b.20190$cJ5.2823@www.newsranger.com...
> I have two identical computers in two locations (W2K Pro).
> They only have domain accounts (same id/password).
> First PC has direct network connection. Second PC
> is accessing network via VPN, cached credentials are used
> to log in first.
> There is rarely any need to access domain resources from the 2nd PC.
> When domain password is periodically changed on the first computer
> (due to security policy), I still have to log in to the 2nd PC
> with an old password, and still can access network via VPN.
> However, doing that locks the domain account out (apparently
> either VPN software sends cached domain credentials / old domain
> password to the network, or something else does that, even though
> there is no need to use domain resources, and VPN still works
> just fine with locked out account).
>
> Is it possible to:
> 1. Update the domain password on the 2nd computer w/o physical connection
> to domain (I suppose that'll be hard to do) or
> 2. If the credentials are stored in some specific files or registry
> entries, where are these located. Can these files be copied to the
> 2nd PC to change password this way?
> 3. Anything else I can do to solve this problem (can't create
> local account).
>
> Thanks for any suggestions.
>
>
- Next message: Jack Seredyniecki: "Re: hacking from Terminal services or some other means"
- Previous message: kurtschelling: "login error"
- In reply to:(deleted message) Some One: "How to Change Win 2000 Cached Account Password?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
